find the latest version of a software package, download it, check the PGP signature, check the checksums, and install